Is it impossible for guest user to connect the AWS Workspaces which is created by using ADDS?

Question

I created an AD connector in AWS(Amazon Work Space) and connected the AD connector and Azure ADDS so that Azure AD users can sign in to Windows 10 deployed in AWS workspaces.
Azure AD guest users, however, cannot connect to AWS Workspaces.

Is there any methods to make it possible that Azure AD guest users connect to AWS Workspaces?

Reference) https://aws.amazon.com/jp/blogs/desktop-and-application-streaming/add-your-workspaces-to-azure-ad-using-azure-active-directory-domain-services/

Answer 1

Hi @Anonymous ,

Thanks for your post! The credentials of the guest accounts in the AAD tenant are not synced into the Azure AD DS domain, as the guest accounts' password hashes are not in the same tenant. Please find this documented here: https://learn.microsoft.com/en-us/azure/active-directory-domain-services/faqs#can-guest-users-be-invited-to-my-directory-use-azure-ad-domain-services-

If the authentication requests are sent to Azure AD DS for authentication in the logic, it won't work since AAD DS is not aware of these guests password hashes.

Let me know if this helps. I'm happy to share feedback with the product team for improving this experience if you'd like to share more details about your scenario. Alternatively, if you would like to leave product feedback yourself, you can do so here: https://feedback.azure.com/

-

If the information helped you, please Accept the answer. This will help us and other community members as well.